DATA PRIVACY POLICY

Data Privacy Policy

Version 27.05.2018

We, Andreas Hettich GmbH & Co. KG in Tuttlingen, Germany (in the following „Hettich“), appreciate your visit to our web site and your interest in our products and offerings. The correct handling of your data while respecting your privacy rights as well as the observance of your right to informational self-determination in the use of your personal data is an important concern for us. In this policy we inform you which date we collect for which purpose, how long we store data and which rights under data privacy law you can exercise against us, if we process your data.

In the first section we provide general information on our data protection. In other sections we explain how data are processed on our web site as well as for our business purposes.

1. General Information

Controller under data protection law is Andreas Hettich GmbH & Co.KG, Föhrenstr.12, D-78532 Tuttlingen, Germany. For more details about us, please refer to our Imprint and to our Contact page.

You can contact our Data Privacy Officer Stefan Fischerkeller directly by using the contact details shared on his web site www.deutsche-datenschutzkanzlei.de.

In our Privacy Policy we use terms and definitions of the GDPR, in particular Art. 4 GDPR. In pursuit of this regulation we are “Controller” of personal data, you are the “data subject”. Information that directly or indirectly relates to you is “personal data”. For the purpose of this privacy policy “your data” is the data that directly or indirectly relate to you as a natural person such as name, address, telephone number, your email address, your company and further details, which you fill into forms on our web portal.

Of course you can visit our web sites without providing any personal data to us. In any case, when using our web portal, data is automatically collected and processed, which do not allow us to relate them to you in person. Please refer to the sections

“Web Service Logfiles”

“Our use of Cookies”

“Web Analysis Tool Google Analytics”

in this privacy policy.

This privacy policy is only applicable to our web site „http://www.hettichlab.com/en/”. On third party web sites, to which we link from our own, the privacy policy of the owner of the web site is applicable. Please refer to the imprint of the linked web site.

1.1 Your rights relating to your personal data

As a data subject you may exercise your right of access to your personal data (Art. 15 GDPR). You may have your data rectified in pursuit of Art. 16 GDPR, or on specific grounds have them erased according to Art. 17 GDPR. In accordance with Art.18 GDPR you have the right to restriction of processing, and on grounds relating to your particular situation, you additionally have the right (in pursuit of Art. 21 GDPR) to object to processing your data generally or in parts. For data that you have provided to us, you have the right to receive them in a commonly used and machine-readable format. You have the right to withdraw your consent with processing of your data at any time, with future effect. That means that your withdrawal can only effect future processing. Consequently, past processing remains in compliance with data protection stipulations.

You have a general right to object our processing of your contact and address data for direct marketing purposes, except where you have solicited such material.

Please use info@hettichlab.com or any of the contact details provided on our contact page to exercise your rights against us.

You have the right to lodge a complaint at a supervisory authority.

1.2 Our processing of personal data of customers and suppliers

We collect data (email, phone call, opinion survey, newsletter) of natural persons, who are contacting us or who belong to or represent a company that is in a business relation with us. This data includes your name, the name and address of your company, your business contact data including email and telephone, and your job title. The legal ground for processing your data is our legitimate interest in communicating with you as a representative of your company, as well as the legitimate interest of your company in establishing the communication with us. Your contrary interests may outweigh our legitimate interest, e.g. after you have left your company.

Of course, as a data subject you have rights under data privacy law, e.g. the right to withdraw consent, the right of access to your data, and several other rights. Please refer to section (1.1) Your rights relating to your personal data.

For the purpose of performing a contract we process your company’s data in our CRM and in the planning, manufacturing, logistics and financial modules of our ERP. Depending on your role and responsibility in your company, these data may include the above mentioned personal data, which directly relate to you as a person. However, the purpose of the processing does not relate to you as an individual but to your company instead, as our business partner. Data protection regulations do not apply to business data that do not relate to a natural person.

2. Processing your data on our web site

We never collect personally identifiable information on our web site except where otherwise indicated in this policy. Our web site does provide a menu button “contact”, but this subpage does not deploy a contact form.

2.1 Web server log data

In order to serve our web site contents to your browser, our web server needs to collect data that relate to you. When you access our website with your browser, the server logs the data required for the operation of a web service in the log files: the name of your browser, the name of your internet service provider, the IP address of your PC, the address of the site from which you accessed our website, the name of your operating system, the web pages you visit, and the date and duration of your visit. This data is automatically collected and will only be used for investigations of malfunctions as well as for technical improvement of our web service. Access to this data has the internet service provider that hosts our web site, and if required, IT service providers that we instruct to do so. The legal ground for this processing is our legitimate interest in maintaining the web services in full function. Log data are automatically overwritten after three days.

2.2Our use of cookies

Our website uses cookies. These are small files that the web server transfers to your PC. These files are used to track your way through the pages of our website or to accept an order.

Cookies are distinguished on the one hand according to the duration of their storage. Session cookies are automatically deleted when you close their browser. A session cookie can serve to manage an order form or record which services are of particular interest. Permanent cookies, on the other hand, remain stored on your PC. A permanent cookie can be read again on the next visit of our website. To prevent this, you can delete the permanent cookie after visiting our website. Session cookies are deleted automatically when you close your browser.

On the other hand, cookies are differentiated according to their origin. So-called first-party cookies always come from the website, which is indicated in the address bar of your browser. Third-party cookies are from websites that you have not directly accessed, but which have been linked to images or advertisements on the site of the first provider. Your browser can tell you which sources are stored on your PC.

Most browsers are set to accept cookies. To disable this, please change the appropriate settings of your browser. If your browser does not allow cookies, you may not be able to use all pages of our Internet site without problems.

On legal ground of legitimate interest, we use cookies “_ga”, “_gat” and “_gid” to analyse your use of our web site. Please refer to section Web Analysis Tool Google Analytics for more information.

Possibility of Objection

Most browsers are set to accept cookies. To disable this, please change the appropriate settings of your browser.

2.3 Web Analysis Tool Google Analytics

On legal grounds of legitimate interest in continuous improvement of our web services, this website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and which allow an analysis of the use of the website by you. The information generated by the cookies _ga, _gat and _gid about your use of this web site is generally transferred to a Google server in the USA and stored there.

On our website, IP anonymization is activated, which means that your IP address will be shortened by Google prior to transmission to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage against the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Possibility of Objection

You can prevent cookies from being saved by setting your browser software accordingly. This may result in impairment of the functionality of our websites. Deleting permanent cookies after visiting our websites does not result in any impairment.

In addition, you may prevent Google’s processing of the data (including your IP address) generated by the cookie and your use of the website (including your IP address) as well as the processing of this data by Google by using the browser plugin http://tools.google.com/dlpage/gaoptout?hl=en download and install.

3. Processing your data on third party web sites we link to

Our web site links to third party web sites as described in the following.

3.1 Opinion Survey

For the Opinion Survey our web site links to an automated form which is deployed by a service provider to whom we have commissioned the survey. Under data protection law the service provider himself is responsible for this deployment and provides a data privacy policy of his own. The service provider transmits all your responses to us. We analyze the responses for the purpose of our relationship with our customers. Your personal data are processed on lefhgal grounds of our legitimate interest in communicating with our customers. Please refer to section 1.2 Our processing of personal data of customers and suppliers. You may provide us with personal information on a completely voluntary basis. In case that we plan to process your personal information for additional purposes (e.g. for a prize draw) you will be accordingly informed on the survey website.

​​​​​​​3.2 Report a Claim

For the “Report a Claim” function our web site links to an automated form which is deployed by a service provider to whom we have commissioned the collection of data.. Under data protection law the service provider himself is responsible for this deployment and provides a data privacy policy of his own. The service provider transmits all your responses to us. We analyze the responses for the purpose of our relationship with our customers. Your personal data are processed on lefhgal grounds of our legitimate interest in communicating with our customers. Please refer to section 1.2 Our processing of personal data of customers and suppliers.

3.3 ​​​​​​​YouTube Video

When you visit our web site a video stored on YouTube maybe started automatically. YouTube do not have their own data protection policy. Google’s general privacy policies apply to YouTube as well as to all other Google services. You can look up this policy at: http://www.google.com/policies/privacy/.